Netskope named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Service Edge. Get the Report.

  • Products

    Netskope products are built on the Netskope Security Cloud.

  • Platform

    Unrivaled visibility and real-time data and threat protection on the world's largest security private cloud.

Netskope Named a Leader in the 2022 Gartner Magic Quadrant™ for SSE Report

Get the report Go to Products Overview
Netskope gartner mq 2022 sse leader

Netskope delivers a modern cloud security stack, with unified capabilities for data and threat protection, plus secure private access.

Explore our platform
Birds eye view metropolitan city

Make the move to market-leading cloud security services with minimal latency and high reliability.

Learn more
Lighted highway through mountainside switchbacks

Prevent threats that often evade other security solutions using a single-pass SSE framework.

Learn more
Lighting storm over metropolitan area

Zero trust solutions for SSE and SASE deployments

Learn more
Boat driving through open sea

Netskope enables a safe, cloud-smart, and fast journey to adopt cloud services, apps, and public cloud infrastructure.

Learn more
Wind turbines along cliffside
  • Customer Success

    Secure your digital transformation journey and make the most of your cloud, web, and private applications.

  • Customer Support

    Proactive support and engagement to optimize your Netskope environment and accelerate your success.

  • Training and Certification

    Netskope training will help you become a cloud security expert.

Trust Netskope to help you address evolving threats, new risks, technology shifts, organizational and network changes, and new regulatory requirements.

Learn more
Woman smiling with glasses looking out window

We have qualified engineers worldwide, with diverse backgrounds in cloud security, networking, virtualization, content delivery, and software development, ready to give you timely, high-quality technical assistance.

Learn more
Bearded man wearing headset working on computer

Secure your digital transformation journey and make the most of your cloud, web, and private applications with Netskope training.

Learn more
Group of young professionals working
  • Resources

    Learn more about how Netskope can help you secure your journey to the cloud.

  • Blog

    Learn how Netskope enables security and networking transformation through security service edge (SSE).

  • Events & Workshops

    Stay ahead of the latest security trends and connect with your peers.

  • Security Defined

    Everything you need to know in our cybersecurity encyclopedia.

Security Visionaries Podcast

Bonus Episode: The Importance of Security Service Edge (SSE)

Play the podcast
Black man sitting in conference meeting

Read the latest on how Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog
Sunrise and cloudy sky

SASE Week

Netskope is positioned to help you begin your journey and discover where Security, Networking, and Zero Trust fit in the SASE world.

Learn more
SASE Week

What is Security Service Edge?

Explore the security side of SASE, the future of network and protection in the cloud.

Learn more
Four-way roundabout
  • Company

    We help you stay ahead of cloud, data, and network security challenges.

  • Why Netskope

    Cloud transformation and work from anywhere have changed how security needs to work.

  • Leadership

    Our leadership team is fiercely committed to doing everything it takes to make our customers successful.

  • Partners

    We partner with security leaders to help you secure your journey to the cloud.

Netskope enables the future of work.

Find out more
Curvy road through wooded area

Netskope is redefining cloud, data, and network security to help organizations apply Zero Trust principles to protect data.

Learn more
Switchback road atop a cliffside

Thinkers, builders, dreamers, innovators. Together, we deliver cutting-edge cloud security solutions to help our customers protect their data and people.

Meet our team
Group of hikers scaling a snowy mountain

Netskope’s partner-centric go-to-market strategy enables our partners to maximize their growth and profitability while transforming enterprise security.

Learn more
Group of diverse young professionals smiling
Blog CSO, Full Skope The SASE Solution to Network and Security’s Complicated Relationship Status
Jun 22 2021

The SASE Solution to Network and Security’s Complicated Relationship Status

If our friends Security and Networking were on Facebook, they would probably both list their relationship status as “It’s Complicated.” Sometimes everything’s great, but now and then things can get a little weird, unclear, or uncomfortable.

At many organizations, there has traditionally been a barrier between the security and networking teams. Each team has its own objectives — and at times, those objectives can be at cross-purposes. Enforcing security affects the networking team’s ability to do its job and serve user demands. At the same time, the needs and expectations of networking also have a direct impact on the security team. This friction can cause networking and security to butt heads. This conflict can cost companies real money and put digital transformation projects at risk.

Over the last year, that friction has generated some extra heat. With networking teams scrambling to support remote workforces during the COVID-19 pandemic, security teams were tasked with the dual responsibilities of helping enable business continuity while also protecting their organizations from opportunistic attacks. This heightened state of tension in the networking/security relationship isn’t going away.

Different teams with different needs

The networking team has traditionally been tasked with providing the connectivity so end users can access the resources they need. To keep users happy and business productive, the network has to be reliably available and fast.

At the same time, the security team needs to protect the company’s data. To do that, security has traditionally needed to implement heavy-handed controls that can impact a user’s access to resources. The traditional process of filtering network traffic for threats and enforcing access controls typically meant that users would experience slow performance, or being blocked entirely from accessing an application or file. If security blocks access to a resource in the name of protecting the organization, that obstruction may then cause problems for the networking team tasked with giving the user the access they need to do their job.

This complicated situation is really the root of the problem — and it’s been a long-standing issue between networking and security teams. They’ve been making it work for years for the sake of the company — but no one’s feeling the love.

SASE brings networking and security together

Technology may solve the issue. Things are finally starting to get much less complicated for security and networking — thanks to the Secure Access Service Edge (SASE). From a technology standpoint, SASE merges together a modern set of security capabilities that are cloud-delivered with a modern set of networking capabilities. Both networking and security technologies are transforming to better serve a world where there will be more applications, users, and data outside the corporate network than there will be inside it.

SASE is about a technology shift that’s already in progress. But there’s another side to this story. Digital transformation means that users expect to work from everywhere, on their own devices, with unfettered access to what they need. To that end, SASE is also playing the part of “marriage counselor” for networking and security — bringing both teams together with the common objective of providing fast and secure access for any user on any device accessing any internet resource.

SASE establishes a set of requirements where the network and security architectures can evolve to better serve both sides, making both teams happier. The relationship status has suddenly changed, and they’re able to work together harmoniously in a way they never have before.

Bringing the magic back: allow is the new block

The ultimate end-state with SASE is that security doesn’t get in the way anymore. It’s actually integrated. It doesn’t impact the experience of the user or slow things down. And it doesn’t get in the way like the firewalls and secure web gateways (SWGs) of old, blocking access to everything just in case.

Instead of blocking everything that potentially poses a risk, security can now be very prescriptive and precise. SASE only blocks access based on actual risks as defined by granular, policy-based controls. It doesn’t arbitrarily deny access to benign or simply unknown access just to be safe, which has notoriously caused problems at many organizations. With a SASE architecture, allow is the new block.

On the networking side, security has historically been forced into their architecture. Because security was a mandatory requirement, the network team had to reroute traffic through the security appliances located in the data center. But this sort of “hairpinning” of all network traffic creates a security bottleneck that significantly degrades user performance.

With SASE, users are allowed to go directly to where they want to go. A “direct-to-net” network architecture is enabled by security being implemented at the network edge, as close to the user as possible.

Equal partners build a lasting relationship

Some companies are already adopting SASE, modernizing their architecture, and building a better relationship between teams. But as with anything, there are always going to be laggards. Some organizations are slow to adopt because they can’t get out of their own way. Or there’s the slow, bureaucratic process of regulations evolving. And for some bigger enterprises (like large, monolithic financial institutions), it’s going to take a more measured and gradual adoption process before they will be comfortable with letting go of blocking access to everything as a general rule.

For security, SASE is like using a scalpel rather than a sledgehammer. Organizations can immediately go from coarse “block everything” security to fine-grained controls. Zero Trust is another area that’s also evolving as part of this. Zero Trust traditionally meant “don’t trust anybody,” but in the SASE era, the Zero Trust concept has evolved to be something more adaptive. The emergence of artificial intelligence (AI) and machine learning (ML) capabilities are a part of this as well, making access control and data protection more intelligent and automated.

But the reason SASE will win out is that it wasn’t designed to favor security over networking, or vice versa. SASE is a more simplified and elegant umbrella architecture. It provides fast and secure access for any user, anywhere, on any device, to anything they might need. From a security perspective, it’s moving the visibility, control, and inspection point as close to the user as you can. Wherever they go, the system follows them. And the network becomes a very important part of that because you’re no longer dealing with entities that are residing in one physical location. They’re everywhere now, so the network itself plays just as important a role as security does.

And that equal value in the partnership between network and security is something that’s been missing for a very long time.

This piece was originally published on VentureBeat.

author image
About the author
Bob Gilbert heads up the product marketing efforts at Netskope, a market-leading cloud security company. Bob is a prolific speaker and product demonstrator, reaching live audiences in more than 45 countries over the past decade.
Bob Gilbert heads up the product marketing efforts at Netskope, a market-leading cloud security company. Bob is a prolific speaker and product demonstrator, reaching live audiences in more than 45 countries over the past decade.